Description

You will lead incident response efforts and automate security operations to protect organizational infrastructure.

This role is hybrid.

Responsibilities

• Act as Incident Commander during security incidents to assess scope, impact, and containment strategies.
• Design and execute incident response processes, including threat detection tool integration and automated response mechanisms.
• Configure, integrate, and maintain security monitoring and response tools to reduce manual intervention.
• Conduct regular incident response exercises and post-incident reviews to refine detection and response capabilities.
• Coordinate communication between technical teams, executive leadership, and external partners during escalations.

Required Skills

• 10+ years of experience in cybersecurity and incident response.
• Proven experience as an Incident Commander managing high-pressure security events.
• Hands-on experience configuring and automating SIEM, SOAR, and EDR tools.
• Proficiency with RESTful APIs and data integration techniques for security system communication.
• Experience with Infrastructure-as-Code tools such as Terraform or Ansible.
• Knowledge of CI/CD pipelines, Git, and modern software development practices for security tool deployment.
• Strong background in threat analysis, forensic investigation, and response strategy development.
• Ability to automate repetitive security tasks and response actions.

Key Skills

Education

Any Gradute